MacBooks made great Linux machines for many years before the bad times started. And hopefully will again some day!
Microsoft for years tried to act like a good guy with Secure Boot standards that promised systems would remain general purpose computers. If Microsoft obeys it's own standards, that should be the case here too! If not, how can we expect other vendors to provide the general purpose computing systems Microsoft has promised to keep available, as they locked down the boot chain?
The only "downside" is no Windows VMs, but they don't seem to care about that.
And I want one or two for myself too, sans the backdoors...
I suspect you're greatly misunderstanding your clients' needs, because what you're saying is not an officially supported option that exists for anyone outside government agencies.
.
What Purism offers with its Pureboot and hardware security chip that enforces deemed-tolerable ME payload is sufficient enough for our ask.
.
> Are there any modern Intel systems that can
The lack of availability of a product does not change the desire for the product to exist. RISC-V is already successfully playing in a market space with products that satisfy my asks above, maybe Intel can catch up some day.
.
> clients' needs,
Our clients came to us and were clear about what their ask was. I'm kind of chuckling right now, because one of clients in particular, if he saw your post would shoot back with "it's not called the Bill of Needs".
Some of the other ones are government. But I appreciate you trying to be helpful.